AA ColliForge Privacy Policy

1. Information AA ColliForge Collects

We collect information to provide better services to all our university developers and builders. The information we collect includes:

2. Why AA ColliForge Collects Data

We use the data we collect for the following core purposes:

• Provide and maintain our services: Enabling team matching, project collaboration boards, and real-time team messaging.
• Campus and developer rankings: Computing leaderboard standings based on your skills, verified GitHub projects, and hackathon milestones.
• Protect against abuse and spam: Preventing malicious activity, bot registrations, and preserving platform trust.
• Communicate with you: Sending essential service notifications such as password reset links, email verification codes, and team invitations.

3. Your Privacy Controls

You have meaningful choices regarding the information we collect and how it is used:

• Profile Management: You can edit your bio, degree, university, programming languages, and social links at any time from your Profile settings.
• 30-Day Account Recovery & Soft Deletion: If you delete your account, your profile and projects are immediately hidden from the public. Your data is preserved for a 30-day grace period so you can log back in and recover your account if desired. After 30 days, all data is permanently purged.
• Post Visibility: You can choose whether community posts are visible to the entire university network or only to your direct connections.

4. Sharing Your Information

We do not sell your personal data. We do not share your private personal information with companies, organizations, or individuals outside of AA ColliForge except in the following limited circumstances:

• With your consent: Information visible on your public developer profile (name, university, bio, projects, verified badge) is viewable by other signed-in users on the platform.
• For legal reasons: We will share personal information if we have a good-faith belief that access, use, preservation, or disclosure of the information is reasonably necessary to meet applicable laws or governmental requests.

5. Keeping Your Information Secure

We build security into our services to protect your information:

• All traffic is strictly encrypted in transit using industry-standard HTTPS / TLS.
• Passwords are salted and cryptographically hashed by Supabase Auth and never stored in plain text.
• Row Level Security (RLS) policies enforce database-level access rules ensuring only authorized users can read or write their private records.

6. Contact & Compliance

If you have any questions about this Privacy Policy or wish to request data deletion, you can reach out through your account dashboard or contact: